This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Toronto"

From OWASP
Jump to: navigation, search
(Upcoming Meeting, March 14th 2008)
(Upcoming Meeting, June 21st 2007)
Line 2: Line 2:
  
 
The mailing list archive can be accessed from [http://sourceforge.net/mailarchive/forum.php?forum=owasp-toronto here.]
 
The mailing list archive can be accessed from [http://sourceforge.net/mailarchive/forum.php?forum=owasp-toronto here.]
== Upcoming Meeting, March 14th 2008 ==
+
== Upcoming Meeting, June 21st 2007 ==
  
The next chapter meeting will be held on March 14th 2007 at a <B>New location (TLC-B (4-179), 121 King West, 4th floor)</B>. There will be two topics of discussion:
+
The next chapter meeting will be held on June 21st at a <B>20-79 Wellington Street West, Toronto, ON M5K 1B9 </B>.  
  
Comparing Web App Scanners - Case Study
 
  
Description: Andre and his TSS team undertook an evaluation for the acquisition process for an enterprise-class web security scanning product.  The presentation will describe some of the objective (and subjective) selection criteria, the observations and opinions of the evaluation team, impressions of the selected tool after several real-world engagements, and the pros and cons of web security scanners in the areas of client confidentiality, of coverage, and of extensibility.
+
<B>Topic: </B>Incorporating security into the SDLC
Presenter : Andre Rochefort
 
About The Presenter:  Andre, is the Web Application Security Team Lead for TELUS Security Solutions (Former - Assurent Secure Techbologies).  Andre who is responsible for National Practice Leadership for web app security within TSS and is a key developer on the NSS-certified Assurelogic Web Application Firewall product, and a co-author of our Secure Development Methodology.
 
  
Web Application Firewalls - Panel Discussion
+
<B>Description</B>: Incorporating security into the SDLC has been the subject of academic studies for years.  However, as hacking has evolved from a hobbyist's sport to organized professionals focused on monetization, enterprises have been forced to take concerted countermeasures.  Banks, often the target of cyber attacks, have set an example for responsible security strategies by adopting SDLCs that shift from a reactive response to the
Andre and a couple of other security professionals will be part of a panel where we will discuss with the attendees the advantages and disadvantages of Web Application Firewalls.
+
latest attack to the proactive development of software systems that are among the most secure in today's world. How do the world's leading
 +
financial institutions balance risk against the pressures of delivering software to customers quickly?  How are developers trained to write code
 +
securely?  How are software security tools, such as dynamic and static analysis, deployed for optimal use?
 +
 
 +
<B>Presenter</B> : Fortify Software
  
 
== Sponsorship ==
 
== Sponsorship ==

Revision as of 20:47, 4 June 2007

OWASP Toronto

Welcome to the Toronto chapter homepage. The chapter leader is Nish Bhalla


Participation

OWASP Foundation (Overview Slides) is a professional association of global members and is open to anyone interested in learning more about software security. Local chapters are run independently and guided by the Chapter_Leader_Handbook. As a 501(c)(3) non-profit professional association your support and sponsorship of any meeting venue and/or refreshments is tax-deductible. Financial contributions should only be made online using the authorized online chapter donation button. To be a SPEAKER at ANY OWASP Chapter in the world simply review the speaker agreement and then contact the local chapter leader with details of what OWASP PROJECT, independent research or related software security topic you would like to present on.

Sponsorship/Membership

Btn donate SM.gif to this chapter or become a local chapter supporter. Or consider the value of Individual, Corporate, or Academic Supporter membership. Ready to become a member? Join Now BlueIcon.JPG


The mailing list archive can be accessed from here.

Upcoming Meeting, June 21st 2007

The next chapter meeting will be held on June 21st at a 20-79 Wellington Street West, Toronto, ON M5K 1B9 .


Topic: Incorporating security into the SDLC

Description: Incorporating security into the SDLC has been the subject of academic studies for years. However, as hacking has evolved from a hobbyist's sport to organized professionals focused on monetization, enterprises have been forced to take concerted countermeasures. Banks, often the target of cyber attacks, have set an example for responsible security strategies by adopting SDLCs that shift from a reactive response to the latest attack to the proactive development of software systems that are among the most secure in today's world. How do the world's leading financial institutions balance risk against the pressures of delivering software to customers quickly? How are developers trained to write code securely? How are software security tools, such as dynamic and static analysis, deployed for optimal use?

Presenter : Fortify Software

Sponsorship

Many thanks to Deloitte & Touche LLP. for sponsoring the location and food for these meetings.


Speakers

We are always looking for speakers to present on their topic of choice. If you are interested please contact Nish Bhalla


OWASP Toronto Chapter Committee

The OWASP Toronto Chapter has formed a committee which would help with direction of the chapter. Deloitte & Touches' Application Security Group and Security Compass's Professional Services Group are helping lead this initiative. We are looking for additional members to expand our chapter.


Current Committe Members

Reza Kopaee
Nish Bhalla


Meetings

Everyone is welcome to join us at our chapter meetings. These meetings are held every Second Wednesday of the month. We meet at the conference room at Deloitte & Touche. Beverages and snacks are provided.


Address and Directions to the meeting are:

20th floor, the TLC Room (signs will be provided on the floor)
TD Centre, TD Waterhouse Tower
79 Wellington Rd. W.
Toronto



Directions to the meetings

OWASP Toronto chapter meetings are open to the public RSVP is requested by sending an email

Past Presentations For Download

The past presentations are avaiable for download from here. If you have any comments on the presentations please send them to us.

Basic Web Application Testing Methodology by Nish Bhalla Security Compass

Basic Web Services Security by Rohit Sethi Security Compass

Authentication Security by Hui Zhu